An issue was discovered in GNOME GLib before 2.78.5, and 2.79.x and 2.80.x before 2.80.1. When a GDBus-based client subscribes to signals from a trusted system service such as NetworkManager on a shared computer, other users of the same computer can send spoofed D-Bus signals that the GDBus-based client will wrongly interpret as having been sent by the trusted system service. This could lead to the GDBus-based client behaving incorrectly, with an application-dependent impact.
CVSS Details
- CVSS 3.1 Base Score: 5.2
- CVSS 3.1 Vector: (CVSS:3.1/AV:P/AC:L/PR:N/UI:N/S:U/C:N/I:H/A:L)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade glib2-docUpgrade mingw64-glib2-staticUpgrade mingw64-glib2Upgrade glib2Upgrade glib2-famUpgrade glib2-testsUpgrade mingw32-glib2Upgrade mingw32-glib2-staticUpgrade glib2-develUpgrade glib2-static | Sep 12, 2024 | May 7, 2024 |
| Alpine Linux | — | Upgrade glib | Aug 22, 2024 | May 7, 2024 |
| Debian | — | Upgrade glib2.0 | May 10, 2024 | May 7, 2024 |
| Gentoo Linux | — | Upgrade dev-libs/glib. | Jun 24, 2024 | May 7, 2024 |
| Huawei Euleros 2_0_sp10 | — | Upgrade glib2 | May 13, 2025 | May 7, 2024 |
| Huawei Euleros 2_0_sp11 | — | Upgrade glib2 | Oct 9, 2024 | May 7, 2024 |
| Huawei Euleros 2_0_sp12 | — | Upgrade glib2 | Oct 9, 2024 | May 7, 2024 |
| Nutanix Ahv | — | Upgrade Nutanix AHV to the latest version | Jun 5, 2026 | Oct 10, 2025 |
| Oracle_linux | — | Upgrade glib2-famUpgrade mingw32-glib2-staticUpgrade glib2Upgrade mingw64-glib2-staticUpgrade glib2-staticUpgrade mingw64-glib2Upgrade glib2-develUpgrade glib2-testsUpgrade glib2-docUpgrade mingw32-glib2 | Oct 16, 2024 | May 7, 2024 |
| Redhat_linux | — | Upgrade glib2-debuginfoUpgrade mingw64-glib2Upgrade mingw32-glib2-staticUpgrade glib2-debugsourceUpgrade glib2-staticUpgrade glib2-famUpgrade glib2-devel-debuginfoUpgrade mingw64-glib2-debuginfoUpgrade glib2-tests-debuginfoUpgrade glib2-develUpgrade mingw64-glib2-staticUpgrade glib2-testsUpgrade mingw32-glib2Upgrade glib2-docUpgrade glib2Upgrade mingw32-glib2-debuginfoNo solution existsUpgrade glib2-fam-debuginfo | Sep 10, 2024 | May 7, 2024 |
| Rocky_linux | — | Upgrade glib2-fam-debuginfoUpgrade glib2-debuginfoUpgrade glib2-testsUpgrade glib2-staticUpgrade glib2-debugsourceUpgrade glib2-tests-debuginfoUpgrade glib2-devel-debuginfoUpgrade glib2Upgrade glib2-develUpgrade glib2-fam | Sep 17, 2024 | May 7, 2024 |
| Suse | — | Upgrade libgio-2_0-0-32bitUpgrade glib2-tests-develUpgrade typelib-1_0-Gio-2_0Upgrade libglib-2_0-0Upgrade libgmodule-2_0-0Upgrade glib2-devel-32bitUpgrade typelib-1_0-GIRepository-3_0Upgrade typelib-1_0-GLibUnix-2_0Upgrade libgirepository-2_0-0Upgrade glib2-langUpgrade libgio-2_0-0Upgrade glib2-develUpgrade libgobject-2_0-0Upgrade gio-branding-upstreamUpgrade libgmodule-2_0-0-32bitUpgrade typelib-1_0-GModule-2_0Upgrade typelib-1_0-GObject-2_0Upgrade libgio-famUpgrade gio-branding-SLEUpgrade libgobject-2_0-0-32bitUpgrade libgthread-2_0-0Upgrade libgthread-2_0-0-32bitUpgrade glib2-toolsUpgrade glib2-docUpgrade glib2-tools-32bitUpgrade typelib-1_0-GLib-2_0Upgrade glib2-devel-staticUpgrade libglib-2_0-0-32bit | May 30, 2024 | May 7, 2024 |
| Ubuntu | — | Upgrade libglib2.0-0t64Upgrade libglib2.0-binUpgrade libglib2.0-0 | May 17, 2024 | May 7, 2024 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | May 7, 2024 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub